$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143268.roa File: AS143268.roa (raw, json) Hash identifier: DBQQuYM8D39oHV/nseztCCwh+kyBuhuL7O8+IQzo5i8= Subject key identifier: D9:DA:CD:5B:A1:40:9A:DC:5A:D8:04:40:FC:BA:B5:27:9A:EB:42:38 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 5AC7C13E82083A0716D31616EEBFEAA6BA6301DF Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143268.roa Signing time: Wed 04 Mar 2026 06:05:46 +0000 ROA not before: Wed 04 Mar 2026 06:00:46 +0000 ROA not after: Wed 03 Mar 2027 06:05:46 +0000 asID: 143268 IP address blocks: 240a:a26a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c7:c1:3e:82:08:3a:07:16:d3:16:16:ee:bf:ea:a6:ba:63:01:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:46 2026 GMT Not After : Mar 3 06:05:46 2027 GMT Subject: CN=D9DACD5BA1409ADC5AD80440FCBAB5279AEB4238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:22:69:18:97:7d:08:f2:00:69:6d:b4:46: a0:ea:1b:15:83:2c:54:0c:21:33:12:df:9f:9d:68: 42:2f:41:01:88:50:15:6b:cc:56:ca:7c:0a:0c:ff: 17:75:a0:18:a6:c9:cc:26:18:b5:1e:69:bf:df:3a: e8:5a:25:ae:b1:aa:5e:61:15:51:ee:36:13:a4:bc: 69:24:47:14:82:b7:04:b5:05:11:8e:d1:71:2b:5d: b1:27:35:b9:32:6a:74:a6:3e:92:86:10:08:30:89: 69:ac:e3:53:c5:da:be:91:ff:a0:1e:88:05:69:2f: 0c:3d:82:02:59:1f:08:8e:a4:c0:dc:04:82:35:14: fc:46:f0:7b:4d:0b:bd:a6:39:4e:cc:83:3c:3c:37: 6c:63:37:56:8a:5b:0a:eb:92:b4:24:d8:7a:b1:95: f1:33:27:08:6d:1e:3a:dc:7b:50:c1:f3:5a:f0:af: 65:85:1d:44:94:08:07:61:f7:2b:3e:78:bf:a1:29: ab:e0:2c:8d:28:55:67:db:d3:5e:b1:e7:4b:f4:a9: 44:00:2c:7e:7d:b8:71:0e:06:9e:4f:6a:06:7c:6f: d9:8c:8b:5b:2b:e6:8f:ee:ac:77:66:3d:ce:8c:d1: 16:c9:fc:5b:ef:00:a3:30:0a:c4:e8:38:e8:da:ef: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:CD:5B:A1:40:9A:DC:5A:D8:04:40:FC:BA:B5:27:9A:EB:42:38 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143268.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a26a::/32 Signature Algorithm: sha256WithRSAEncryption ad:7f:18:1b:ed:a1:13:60:d8:07:75:3d:12:62:12:b4:e1:57: 15:58:0d:80:67:81:47:24:3d:dd:b9:13:16:25:7d:2f:7f:26: 0d:a6:24:47:c6:b2:0b:82:8b:60:b0:41:3a:ac:11:46:9f:07: 98:e3:d1:25:01:30:19:b8:8c:e3:ad:8d:e2:0b:21:cc:91:56: 1d:f2:8e:8e:ac:44:04:17:b4:0e:0b:10:92:dd:76:6a:bd:0b: 7e:fc:f3:1f:ea:7c:5d:90:ef:d3:a5:36:07:c9:41:f3:8a:75: 77:68:9e:e5:ba:46:26:04:05:24:0a:d8:1b:62:7f:79:44:65: 00:a5:a7:e6:40:1f:84:9d:0a:7b:3d:69:e2:fa:aa:32:0a:a0: d2:36:7f:ab:be:f8:27:d5:d1:a0:be:ec:02:2a:52:d3:40:d3: b0:ab:2e:3f:85:4c:e9:04:3a:c5:96:90:9c:99:ed:83:f8:f3: 10:56:bf:64:78:92:42:8d:97:6f:78:02:62:a1:88:7b:fd:15: 6a:41:6b:cf:64:14:f3:76:8c:98:09:d7:1d:03:b2:9b:d4:62: 9a:0d:7c:80:07:71:35:b8:f1:7e:bd:ac:9c:68:0a:85:f8:4b: 8e:93:7e:1f:78:19:02:48:ca:64:89:d2:dc:76:72:26:ec:a7: 0e:fe:34:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUWsfBPoIIOgcW0xYW7r/qprpjAd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA0NloX DTI3MDMwMzA2MDU0NlowMzExMC8GA1UEAxMoRDlEQUNENUJBMTQwOUFEQzVBRDgw NDQwRkNCQUI1Mjc5QUVCNDIzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5SImkYl30I8gBpbbRGoOobFYMsVAwhMxLfn51oQi9BAYhQFWvMVsp8Cgz/ F3WgGKbJzCYYtR5pv9866FolrrGqXmEVUe42E6S8aSRHFIK3BLUFEY7RcStdsSc1 uTJqdKY+koYQCDCJaazjU8XavpH/oB6IBWkvDD2CAlkfCI6kwNwEgjUU/Ebwe00L vaY5TsyDPDw3bGM3VopbCuuStCTYerGV8TMnCG0eOtx7UMHzWvCvZYUdRJQIB2H3 Kz54v6Epq+AsjShVZ9vTXrHnS/SpRAAsfn24cQ4Gnk9qBnxv2YyLWyvmj+6sd2Y9 zozRFsn8W+8AozAKxOg46Nrv5JECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTZ2s1b oUCa3FrYBED8urUnmutCODAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI2OC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK omowDQYJKoZIhvcNAQELBQADggEBAK1/GBvtoRNg2Ad1PRJiErThVxVYDYBngUck Pd25ExYlfS9/Jg2mJEfGsguCi2CwQTqsEUafB5jj0SUBMBm4jOOtjeILIcyRVh3y jo6sRAQXtA4LEJLddmq9C3788x/qfF2Q79OlNgfJQfOKdXdonuW6RiYEBSQK2Bti f3lEZQClp+ZAH4SdCns9aeL6qjIKoNI2f6u++CfV0aC+7AIqUtNA07CrLj+FTOkE OsWWkJyZ7YP48xBWv2R4kkKNl294AmKhiHv9FWpBa89kFPN2jJgJ1x0DspvUYpoN fIAHcTW48X69rJxoCoX4S46Tfh94GQJIymSJ0tx2cibspw7+NEs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:10:41 2026 by rpki-client